Netskope Certified Cloud Security Architect

Question 1

You are implementing Netskope Cloud Exchange in your company lo include functionality provided by third- party partners. What would be a reason for using Netskope Cloud Risk Exchange in this scenario?

A. to automate service tickets from alerts of interest

B. to feed SOC with detection and response services

C. to ingest events and alerts from a Netskope tenant

D. to map multiple scores to a normalized range

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

You recently began deploying Netskope at your company. You are steering all traffic, but you discover that the Real-time Protection policies you created to protect Microsoft OneDrive are not being enforced.
Which default setting in the UI would you change to solve this problem?

A. Disable the default Microsoft appsuite SSL rule.

B. Remove the default steering exception for Cloud Storage.

C. Disable the default certificate-pinned application

D. Remove the default steering exception for domains.

Correct Answer: D

Question 3

You need to extract events and alerts from the Netskope Security Cloud platform and push it to a SIEM solution. What are two supported methods to accomplish this task? (Choose two.)

A. Use the REST API.

B. Use Cloud Ticket Orchestrator.

C. Use Cloud Log Shipper.

D. Stream directly to syslog.

Correct Answer: A,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Review the exhibit.

You created an SSL decryption policy to bypass the inspection of financial and accounting Web categories.
However, you still see banking websites being inspected.
Referring to the exhibit, what are two possible causes of this behavior? (Choose two.)

A. The policy is in a " disabled " state.

B. An incorrect category has been selected

C. An incorrect action has been specified.

D. The policy is in a " pending changes " state.

Correct Answer: B,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Your client is an NG-SWG customer. They are going to use the Explicit Proxy over Tunnel (EPoT) steering method. They have a specific list of domains that they do not want to steer to the Netskope Cloud.
What would accomplish this task?

A. Define exceptions in the Netskope steering configuration

B. Use an SSL decryption policy.

C. Create a real-time policy with a bypass action.

D. Define exception domains in the PAC file.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

You are architecting a Netskope steering configuration for devices that are not owned by the organization The users could be either on-premises or off-premises and the architecture requires that traffic destined to the company ' s instance of Microsoft 365 be steered to Netskope for inspection.
How would you achieve this scenario from a steering perspective?

A. Use explicit proxy and the Netskope Client

B. Use DPoP and Secure Forwarder

C. Use reverse proxy.

D. Use IPsec and GRE tunnels.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

What are three valid Instance Types for supported SaaS applications when using Netskope ' s API-enabled Protection? (Choose three.)

A. Forensic

B. Quarantine

C. API Data Protection

D. DLP Scan

E. Behavior Analytics

Correct Answer: B,D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

Review the exhibit.

AcmeCorp has recently begun using Microsoft 365. The organization is concerned that employees will start using third-party non-AcmeCorp OneDrive instances to store company data. The CISO asks you to use Netskope to create a policy that ensures that no data is being uploaded to non-AcmeCorp instances of OneDrive.
Referring to the exhibit, which two policies would accomplish this posture? (Choose two.)

A. 2

B. 1

C. 3

D. 4

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

You are troubleshooting an issue with users who are unable to reach a financial SaaS application when their traffic passes through Netskope. You determine that this is because of IP restrictions in place with the SaaS vendor. You are unable to add Netskope ' s IP ranges at this time, but need to allow the traffic.
How would you allow this traffic?

A. Use Cloud Explicit Proxy so the traffic will egress from the corporate data center

B. Use an IPsec tunnel to forward traffic so it will egress from the corporate data center

C. Use NPA to implement Source IP anchoring so the traffic will egress from the corporate data center.

D. Use Explicit Proxy Over Tunnel (EPoT) so the traffic will egress from the corporate data center.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Netskope Certified Cloud Security Architect - NSK300 Exam Practice Test

Latest Update

Useful Links

Contact Us